Reading CMDB tables directly requires the cmdb_read role, however accessing theConfigurationmodule requires the asset, itil, or itil_admin roles. For viewing CMDB-related records in the user interface, the itil role is usually sufficient. For updating records and for other manipulation of records, roles with higher credentials are usually required, as noted in each procedure throughout the documentation set.If you do not want to give ITIL role then explore the ACL's.
